diff --git a/roles/distgit/templates/genacls.pkgdb b/roles/distgit/templates/genacls.pkgdb
index 0f052abeaf..da1d99372a 100644
--- a/roles/distgit/templates/genacls.pkgdb
+++ b/roles/distgit/templates/genacls.pkgdb
@@ -66,6 +66,7 @@ if __name__ == '__main__':
     print ''
     # print our default permissions
     print 'repo @all'
+    print '    -   VREF/update-block-push-origin = @all'
     print '    RWC = @admins @fedora-arm @fedora-s390 @fedora-ppc'
     print '    R = @all'
     #print '    RW  private-     = @all'